Talk Deep Dive
summary
A small three‑month CNCF mentorship project builds and merges depstat into the Kubernetes repo, implemented as a cobra CLI and wired into a prow cron job that runs every six hours. It produces dependency graphs, a -d flag to trace an offending module, cycle detection and a list view; typical runs take ~20s and spikes to ~50s alert maintainers. The tool surfaces surprises like a single PR adding ~50 deps, helps trace vulnerable transitive modules, and integrates into CI for historical audits.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 0:15Question
- 1:20Development process
- 2:50CNCF mentorship program
- 4:10Dependency management
- 5:13Kubernetes dependency management
- 7:48Vulnerability scanning
- 8:42Outro
related talks
24mIntro: CNCF CI
35mPanel Discussion: Kubernetes and Cloud Native Friends, A Journey of CNCF Maintainers From India
40mThe Positive Side of Pending Pods: A Toolkit for App Lifecycle
44mTop new CNCF projects to look out for
27mSurviving Day2 : Picking the Right Tool To Secure Your Kubernetes Habitat
46mTop new CNCF projects to look out for
36mSIG Testing Deep Dive
48mA Deep Dive Into 5 years of Minikube